feat: add advanced user permissions

[Regaez]

Similar to the advanced access for pages, we could have advanced access for the users resource too.

For example, it could be valuable to enable permissions for creating/updating/deleting users based on:

• email address domains
• usernames
• groups